Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-12-08 Thread Jason Cooper
On Mon, Dec 01, 2014 at 12:42:09AM +, Yawning Angel wrote: On Sun, 30 Nov 2014 19:19:58 -0500 Jason Cooper t...@lakedaemon.net wrote: On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper t...@lakedaemon.net wrote: It

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-12-08 Thread Jason Cooper
On Mon, Dec 01, 2014 at 05:49:35AM +0100, Sebastian Hahn wrote: Hi Jason, On 30 Nov 2014, at 23:32, Jason Cooper t...@lakedaemon.net wrote: On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: Access via https:// has been provided for years, and should continue to work without

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-12-08 Thread Nick Mathewson
On Mon, Dec 8, 2014 at 8:57 AM, Jason Cooper t...@lakedaemon.net wrote: [...] On a tangent, referring to keys by their short (or long, for that matter) keyid is not a good idea. How to verify Nick actually has the blessing of the Tor project (or any subset of people therein, etc) to sign tags

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-12-08 Thread Jason Cooper
On Mon, Dec 08, 2014 at 10:25:15AM -0500, Nick Mathewson wrote: On Mon, Dec 8, 2014 at 8:57 AM, Jason Cooper t...@lakedaemon.net wrote: [...] On a tangent, referring to keys by their short (or long, for that matter) keyid is not a good idea. How to verify Nick actually has the blessing of

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Jason Cooper
On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: Hi there, git users! Hi Sebastian! At the same time, we've discontinued supporting clones via the git:// Protocol. :( It is unauthenticated and you probably shouldn't use it if at all possible. How does that matter? All of

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Yawning Angel
On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper t...@lakedaemon.net wrote: It is unauthenticated and you probably shouldn't use it if at all possible. How does that matter? All of the tags are signed by Nick Mathewson. This allows the server *and* the path to be untrusted. What about

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Jason Cooper
On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper t...@lakedaemon.net wrote: It is unauthenticated and you probably shouldn't use it if at all possible. How does that matter? All of the tags are signed by Nick Mathewson.

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Yawning Angel
On Sun, 30 Nov 2014 19:19:58 -0500 Jason Cooper t...@lakedaemon.net wrote: On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper t...@lakedaemon.net wrote: It is unauthenticated and you probably shouldn't use it if at all

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Sebastian Hahn
Hi Jason, On 30 Nov 2014, at 23:32, Jason Cooper t...@lakedaemon.net wrote: On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: Access via https:// has been provided for years, and should continue to work without any hiccups. No issue there for folks that prefer the extra layer.